$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: FvPN+gt21tJzp+DF7ybomUB4F351Zt4tstfuJ1AClS0= Subject key identifier: 77:22:78:C6:4C:B2:BA:81:DC:5B:4D:BB:01:20:DD:B8:D1:09:73:C4 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 0482 Signing time: Fri 03 May 2024 01:45:50 +0000 Manifest this update: Fri 03 May 2024 01:45:50 +0000 Manifest next update: Fri 10 May 2024 01:45:50 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: ivsE+y6rtm+N0N1ZnPC1NQWvemugRVUmYVkVeTxZnG4=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: 4Not/cO1zAREq9ZRHJVRnD/iW74EdY0W0JSAaWm1ic0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: May 3 01:45:50 2024 GMT Not After : May 10 01:45:50 2024 GMT Subject: CN=663441ce-4cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7c:4c:61:91:22:57:9d:b5:3f:9e:58:37:c5: d2:63:ee:3a:40:ea:78:1c:b4:50:41:a5:90:69:e1: 10:3c:88:bd:5e:b1:57:ac:7d:b9:17:a8:2d:b5:a4: 06:a2:35:1b:b2:70:7b:ed:b0:30:35:4e:3d:b4:8e: fb:c0:d8:a3:ca:f1:fc:04:9a:9b:64:4e:6e:19:e7: 30:9e:15:b7:44:10:ab:f7:67:7b:4c:54:1f:22:4e: 93:25:8f:5b:9c:2a:48:43:1e:22:dc:ed:99:ce:ea: 4e:12:7c:82:0c:69:00:fa:83:33:32:1a:5d:50:6a: 32:26:78:9c:f1:f7:33:20:e3:4c:7e:d7:5e:42:4d: 5d:a0:d3:a4:6e:35:cb:25:d8:a8:1b:b1:20:36:d4: 8d:09:d1:51:e3:9f:03:46:83:f3:06:be:5c:2c:2d: a7:9a:26:95:bb:9f:d9:64:73:6b:92:d4:ac:4f:0a: f3:8b:97:db:6f:30:91:c6:3d:e4:9d:81:dd:a6:ef: e5:84:88:cb:09:d9:df:0c:2f:89:db:9a:5f:21:d7: e6:10:c0:d2:b9:14:cb:d1:2a:0f:56:11:f6:ff:f3: da:b7:4a:78:ea:f9:8f:fb:32:fa:a5:11:25:ee:b5: a8:02:7b:fe:c3:d9:a6:87:a4:68:97:d8:54:9f:89: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:22:78:C6:4C:B2:BA:81:DC:5B:4D:BB:01:20:DD:B8:D1:09:73:C4 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:32:22:1d:dc:07:cc:a0:2f:eb:3c:d3:e0:3a:db:56:f1:8d: 63:3e:83:1f:02:db:dd:5b:53:29:ab:46:e9:e7:ee:02:d1:74: 78:88:e5:43:76:85:87:c7:67:12:1b:94:0c:f1:45:3a:46:93: 12:f1:28:f5:e9:80:a5:c5:31:9e:de:0a:3c:2a:37:5a:a0:89: 17:13:fd:34:90:e7:f1:15:83:c8:b7:89:57:48:2f:36:51:94: f4:59:a7:97:aa:c5:ea:3e:0a:96:c5:e9:39:6f:24:08:16:40: 24:18:7d:22:16:0f:ef:37:27:5d:3a:a2:33:8c:be:79:1b:bf: ec:6c:26:83:7d:c8:af:dc:de:42:d1:6a:51:14:b4:1c:8e:7c: db:62:16:a9:cf:bb:b6:66:6a:e0:0d:0d:20:7f:7e:d8:34:7e: f9:81:83:55:ed:21:7d:8c:30:01:ca:e9:65:b3:1b:a2:70:34: 5f:16:a5:88:76:60:af:e1:f5:e1:15:b5:21:ce:1e:12:4d:5b: 25:bd:89:b5:c9:ff:98:e0:79:bf:9b:39:44:d7:30:17:ec:78: b9:c0:2c:f2:d8:4d:4a:48:6c:be:26:d9:07:1f:c1:91:bd:d2: b6:04:51:16:e6:88:ba:22:cc:86:77:17:7b:c2:eb:62:cb:42: f4:bb:ff:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjQwNTAzMDE0NTUwWhcNMjQwNTEwMDE0NTUwWjAYMRYwFAYD VQQDEw02NjM0NDFjZS00Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43xMYZEiV521P55YN8XSY+46QOp4HLRQQaWQaeEQPIi9XrFXrH25F6gttaQG ojUbsnB77bAwNU49tI77wNijyvH8BJqbZE5uGecwnhW3RBCr92d7TFQfIk6TJY9b nCpIQx4i3O2ZzupOEnyCDGkA+oMzMhpdUGoyJnic8fczIONMftdeQk1doNOkbjXL JdioG7EgNtSNCdFR458DRoPzBr5cLC2nmiaVu5/ZZHNrktSsTwrzi5fbbzCRxj3k nYHdpu/lhIjLCdnfDC+J25pfIdfmEMDSuRTL0SoPVhH2//Pat0p46vmP+zL6pREl 7rWoAnv+w9mmh6Rol9hUn4lD5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcieMZM srqB3FtNuwEg3bjRCXPEMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALMiId3AfMoC/rPNPgOttW8Y1jPoMfAtvdW1Mpq0bp5+4C0XR4iOVD doWHx2cSG5QM8UU6RpMS8Sj16YClxTGe3go8KjdaoIkXE/00kOfxFYPIt4lXSC82 UZT0WaeXqsXqPgqWxek5byQIFkAkGH0iFg/vNyddOqIzjL55G7/sbCaDfciv3N5C 0WpRFLQcjnzbYhapz7u2ZmrgDQ0gf37YNH75gYNV7SF9jDAByullsxuicDRfFqWI dmCv4fXhFbUhzh4STVslvYm1yf+Y4Hm/mzlE1zAX7Hi5wCzy2E1KSGy+JtkHH8GR vdK2BFEW5oi6IsyGdxd7wutiy0L0u/+5 -----END CERTIFICATE-----Generated at Fri May 3 03:10:57 2024 by rpki-client on console-ams.rpki-client.org